From owner-freebsd-hackers@FreeBSD.ORG Mon Oct 6 09:43:27 2008 Return-Path: Delivered-To: freebsd-hackers@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id CD75D1065687; Mon, 6 Oct 2008 09:43:27 +0000 (UTC) (envelope-from fbsd.hackers@rachie.is-a-geek.net) Received: from mail.rachie.is-a-geek.net (rachie.is-a-geek.net [66.230.99.27]) by mx1.freebsd.org (Postfix) with ESMTP id 91A1D8FC1A; Mon, 6 Oct 2008 09:43:27 +0000 (UTC) (envelope-from fbsd.hackers@rachie.is-a-geek.net) Received: from localhost (mail.rachie.is-a-geek.net [192.168.2.101]) by mail.rachie.is-a-geek.net (Postfix) with ESMTP id BC6D5AFBC01; Mon, 6 Oct 2008 01:24:56 -0800 (AKDT) From: Mel To: freebsd-hackers@freebsd.org Date: Mon, 6 Oct 2008 11:24:54 +0200 User-Agent: KMail/1.9.7 References: <48E94281.8010300@quip.cz> In-Reply-To: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-6" Content-Transfer-Encoding: 7bit Content-Disposition: inline Message-Id: <200810061124.55209.fbsd.hackers@rachie.is-a-geek.net> Cc: freebsd-ports@freebsd.org, Miroslav Lachman <000.fbsd@quip.cz>, bug-followup@freebsd.org Subject: Re: ports/126853: ports-mgmt/portaudit: speed up audit of installed packages X-BeenThere: freebsd-hackers@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Technical Discussions relating to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 06 Oct 2008 09:43:27 -0000 Hello, On Monday 06 October 2008 07:23:37 Eygene Ryabinkin wrote: > But downloading the INDEX file from the central server seemed to be the > best way, since it almost always gives one the latest port versions, so > I had implemented this in a first place. I've been following this, but I don't agree that (port|pkg_)audit should do this, from the very perspective you're writing this program from: On Sunday 28 September 2008 11:49:18 Eygene Ryabinkin wrote: > 4. I feel that it is Unix-way to do the things: create small utilities > that do their (small) job in a proper fashion. Instead, it can provide installed-pkgnamepkgorigin output. Then, any utility can check whether a new version is available, using what ever source it finds relevant. For example, it is completely irrelevant if a new version is available on the FreeBSD servers, when your machine uses a buildserver in a local network. For those machines it's relevant whether their build server has a new version and one can automatically upgrade if one so desires. Similarly, if your /usr/ports is ahead of the FreeBSD's INDEX.bz2, you're again reporting false information. It's also quite trivial to provide this availibility information in a daily security script, for the "majority of cases" and it's better to have tunables like _use_remote_portindex, _use_portsdir=/bigdisk/usr/ports in a script. -- Mel